argos/deployment/docker-compose.override.yml

version: "2.4"

services:
############################## PROXY ########################################
  opendmp.proxy:
    user: ${DEPLOY_USER}:${DEPLOY_USER}
    restart: unless-stopped
    cpus: 1
    mem_limit: 256m
    ports:
      - "${PROXY_APP_PORT}:8081"
      - "${PROXY_MS_PORT}:8082"
    env_file:
      - /proxy/proxy.env
    volumes:
      - /proxy/nginx.conf:/etc/nginx/nginx.conf
      - /proxy/ProxyNginx.conf:/etc/nginx/conf.d/default.conf
      - /proxy/nginx-selfsigned.crt:/certifcates/cert.crt
      - /proxy/nginx-selfsigned.key:/certifcates/key.key
      - /logs/proxy:/tmp/logs
    networks:
      - opendmp-proxy-network

############################## OPENDMP APP #################################
  opendmp.backend:
    user: ${DEPLOY_USER}:${DEPLOY_USER}
    restart: unless-stopped
    cpus: 1
    mem_limit: 2048m
    environment:
      - PROFILE=${PROFILE}
    ports:
      - "8080"
    volumes:
      - /opendmp/backend/config:/config
      - /opendmp/backend/certificates:/certificates
      - /opendmp/backend/i18n:/i18n
      - /opendmp/backend/material:/material
      - /opendmp/backend/Semantics.json:/Semantics.json
      - /storage/backend:/storage
      - /logs/backend:/logs
    networks:
      - opendmp-proxy-network
      - opendmp-backend-network
      - opendmp-plugins-network
      - opendmp-gotenberg-shared-network
      - opendmp-elastic-shared-network
      - opendmp-keycloak-shared-network
      - opendmp-postgres-shared-network
      - opendmp-rabbitmq-shared-network

  opendmp.frontend:
    restart: unless-stopped
    cpus: 1
    mem_limit: 2048m
    ports:
      - "8080"
    volumes:
      - /opendmp/webapp/config.json:/usr/share/nginx/html/assets/config/config.json
      - /opendmp/webapp/nginx.conf:/etc/nginx/nginx.conf
      - /opendmp/webapp/WebAppNginx.conf:/etc/nginx/conf.d/default.conf
    networks:
      - opendmp-proxy-network

  opendmp.notification:
    user: ${DEPLOY_USER}:${DEPLOY_USER}
    cpus: 1
    mem_limit: 1024m
    restart: unless-stopped
    ports:
      - "8080"
    environment:
      - PROFILE=${PROFILE}
    volumes:
      - /opendmp/notification-api/config:/config
      - /opendmp/notification-api/messages:/messages
      - /opendmp/notification-api/notification_templates:/notification_templates
      - /logs/notification-api:/logs
    networks:
      - opendmp-proxy-network
      - opendmp-backend-network
      - opendmp-plugins-network
      - opendmp-rabbitmq-shared-network
      - opendmp-keycloak-shared-network 
      - opendmp-postgres-shared-network

  opendmp.annotation:
    user: ${DEPLOY_USER}:${DEPLOY_USER}
    cpus: 1
    mem_limit: 1024m
    restart: unless-stopped
    ports:
      - "8080"
    environment:
      - PROFILE=${PROFILE}
    volumes:
      - /opendmp/annotation-api/config:/config
      - /opendmp/annotation-api/messages:/messages
      - /logs/annotation-api:/logs
    networks:
      - opendmp-proxy-network
      - opendmp-backend-network
      - opendmp-plugins-network
      - opendmp-rabbitmq-shared-network
      - opendmp-keycloak-shared-network
      - opendmp-postgres-shared-network

############################## FILE-TRANSFORMER #################################

  opendmp.file.transformer.docx:
    user: ${DEPLOY_USER}:${DEPLOY_USER}
    restart: unless-stopped
    cpus: 1
    mem_limit: 1024m
    expose:
      - "8080"
    environment:
      - SERVER_PORT=${SERVER_PORT}
      - PROFILE=${PROFILE}
    volumes:
      - /opendmp/file-transformer-docx/config:/config
      - /logs/file-transformer-docx:/logs
      - /storage/file-transformer-docx:/storage
    networks:
      - opendmp-backend-network
      - opendmp-plugins-network
      - opendmp-gotenberg-shared-network
  
  opendmp.file.transformer.rdajson:
    user: ${DEPLOY_USER}:${DEPLOY_USER}
    restart: unless-stopped
    cpus: 1
    mem_limit: 1024m
    expose:
      - "8080"
    environment:
      - SERVER_PORT=${SERVER_PORT}
      - PROFILE=${PROFILE}
    volumes:
      - /opendmp/file-transformer-rda-json/config:/config
      - /opendmp/file-transformer-rda-json/internal:/internal
      - /logs/file-transformer-rda-json:/logs
      - /storage/file-transformer-rda-json:/storage
    networks:
      - opendmp-backend-network
      - opendmp-plugins-network

############################## ZENODO #######################################
  # opendmp.zenodo:
  #   user: ${DEPLOY_USER}:${DEPLOY_USER}
  #   restart: unless-stopped
  #   cpus: 1
  #   mem_limit: 1024m
  #   expose:
  #     - "8080"
  #   environment:
  #     - PROFILE=${PROFILE}
  #   volumes:
  #     - /opendmp/zenodo/config:/config
  #     - /opendmp/zenodo/zenodo.jpg:/zenodo.jpg
  #     - /logs/zenodo:/logs
  #   networks:
  #     - opendmp-plugins-network
  #     - opendmp-keycloak-shared-network

############################## POSTGRES 16 #################################

  opendmp.postgres:
      user: ${DEPLOY_USER}:${DEPLOY_USER}
      restart: unless-stopped
      mem_limit: 2048M
      ports:
        # - "127.0.0.1:${POSTGRES_PORT}:5432"
        - "${POSTGRES_PORT}:5432"
      env_file:
      - postgres/postgres.env
      volumes:
        - /postgres/opendmp_init.sql:/docker-entrypoint-initdb.d/opendmp_init.sql
        - /postgres/keycloak_init.sql:/docker-entrypoint-initdb.d/keycloak_init.sql
        - /storage/postgres/data:/var/lib/postgresql/data
      networks:
        - opendmp-keycloak-shared-network

################################# ELK #################################################
  opendmp.elasticsearch:
    user: ${DEPLOY_USER}:${DEPLOY_USER}
    group_add:
      - 0
    restart: unless-stopped
    cpus: 2
    mem_limit: 1024m
    env_file:
      - /elk/config-elk/elasticsearch/elastic.env
    environment:
      - "ES_JAVA_OPTS=-Xmx512m -Xms512m"
    ulimits:
      nproc: 65535
      memlock:
        soft: -1
        hard: -1
    volumes:
    - /elk/config-elk/elasticsearch/certificates:/usr/share/elasticsearch/config/certificates
    - /elk/config-elk/elasticsearch/config/log4j2.properties:/usr/share/elasticsearch/config/log4j2.properties:ro
    - /elk/config-elk/elasticsearch/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml:ro
    - /elk/data-elk/elasticsearch-data:/usr/share/elasticsearch/data
    - /elk/data-elk/elasticsearch-log:/usr/share/elasticsearch/logs
    expose:
      - "9200"
      - "9300"
    networks:
      - opendmp-elastic-network
      - opendmp-elastic-shared-network
    healthcheck:
      test: curl --cacert /usr/share/elasticsearch/config/certificates/ca/ca.crt -s https://localhost:9200 >/dev/null; if [[ $$? == 52 ]]; then echo 0; else echo 1; fi
      interval: 30s
      timeout: 10s
      retries: 5

  # opendmp.logstash:
  #   volumes:
  #     - /elk/data-elk/logstash-log:/usr/share/logstash/logs

  opendmp.kibana:
    user: ${DEPLOY_USER}:${DEPLOY_USER}
    restart: unless-stopped
    cpus: 2
    mem_limit: 1024m
    environment:
      - xpack.license.self_generated.type=basic
      - xpack.security.enabled=true
    volumes:
      - /elk/config-elk/kibana/certificates:/usr/share/kibana/certificates
      - /elk/config-elk/kibana/certificates/ca:/usr/share/kibana/certificate_authorities
      - /elk/config-elk/kibana/config:/usr/share/kibana/config:ro
    expose:
      - "5601"
    networks:
      - opendmp-elastic-network

  # opendmp.filebeat:
  

############################## KEYCLOAK ###############################################
  opendmp.keycloak:
    restart: unless-stopped
    command: ["start", "--log=console,file", "--log-file=/tmp/logs/keycloak.log", "--import-realm"]
    cpus: 1
    mem_limit: 1024M
    security_opt:
       - seccomp:unconfined
    env_file:
      - /keycloak/keycloak.env
    environment:
      - JAVA_OPTS_APPEND="-Djava.net.preferIPv4Stack=true"
    volumes:
      - /logs/keycloak:/tmp/logs
      - /keycloak/imports/opendmp-realm.json:/opt/keycloak/data/import/opendmp-realm.json
      - /keycloak/certs/keycloak-selfsigned.crt:/tmp/keycloak-selfsigned.crt:ro
      - /keycloak/certs/keycloak-selfsigned.key:/tmp/keycloak-selfsigned.key:ro
    expose:
      - "8443"
    networks:
      - opendmp-proxy-network
      - opendmp-keycloak-shared-network

############################## RABBITMQ ###############################################
  opendmp.rabbitmq:
    labels:
      NAME: "rabbitmq"
    cpus: 1
    mem_limit: 512m
    restart: unless-stopped
    expose:
      - "15672"
      - "5672"
    env_file:
      - /rabbitmq/rabbitmq.env
#    volumes:
#      - /rabbitmq/rabbitmq.config:/etc/rabbitmq/rabbitmq.config:ro
    networks:
      - opendmp-proxy-network
      - opendmp-rabbitmq-shared-network

############################## GOTENBERG ##############################################
  opendmo.gotenberg:
    mem_limit: 2048m
    restart: unless-stopped
    expose:
     - "3000"
    hostname: gotenberg
    env_file:
      - /gotenberg/gotenberg.env
    networks:
      - opendmp-gotenberg-shared-network

networks:
  opendmp-proxy-network:
  opendmp-backend-network:
  opendmp-plugins-network:
  opendmp-keycloak-shared-network:
    external:
      name: opendmp-keycloak-shared-network
  opendmp-gotenberg-shared-network:
    external:
      name: opendmp-gotenberg-shared-network
  opendmp-rabbitmq-shared-network:
    external:
      name: opendmp-rabbitmq-shared-network
  opendmp-elastic-shared-network:
    external:
      name: opendmp-elastic-shared-network
  opendmp-postgres-shared-network:
    external:
      name: opendmp-postgres-shared-network